use secure URL for rubygems source
minimal rails versions bumped due to CVE-2014-0130

http://weblog.rubyonrails.org/2014/5/6/Rails_3_2_18_4_0_5_and_4_1_1_have_been_released/
Merge pull request #341 from korobkov/master

update rails versions